Both OpenAI and now Anthropic have had models escape containment and attack real systems.